ipsec: Generate IKE proposals with PRFs

[network.git] / config / vpn / security-policies / performance

diff --git a/config/vpn/security-policies/performance b/config/vpn/security-policies/performance
index 0d4f0ee6363962f72c8719bc637089eaa7bb644e..30904b78b106f7d2ce71f4358e530bc5e998ac6d 100644 (file)
--- a/config/vpn/security-policies/performance
+++ b/config/vpn/security-policies/performance
@@ -2,6 +2,7 @@ CIPHER="CHACHA20-POLY1305 AES128-GCM128 AES128-CBC"
 COMPRESSION="off"
 GROUP_TYPE="ECP521 ECP384 ECP256 ECP224 ECP192 CURVE25519"
 INTEGRITY="SHA256"
+PSEUDO_RANDOM_FUNCTION="SHA256"
 KEY_EXCHANGE="ikev2"
 LIFETIME="28800"
 PFS="on"